CA/Browser Forum
An industry organization composed of certificate authorities and browser vendors that develops and maintains baseline requirements and specifications related to certificate issuance and trust stores.
Timeline (last 90 days)
Site operators should confirm whether their own certificate chain includes the affected intermediate CA, and monitor trust store update announcements from the CA/Browser Forum and mainstream browser vendors to replace affected certificates in a timely manner.
eMudhra is a major licensed certificate authority (CA) in India, regulated under India's Information Technology Act and the Controller of Certifying Authorities (CCA) system, and is also included in the CA/Browser Forum audit framework.
Commercial CA root certificates are preloaded in mainstream trust stores, and their issuance behavior is constrained by CA/Browser Forum baseline requirements and audits in their respective jurisdictions.
The baseline requirements established by the CA/Browser Forum set minimum standards for CAs in key generation, certificate issuance, audit logging and other aspects, for example requiring RSA keys of at least 2048 bits, the use of certified hardware security modules (HSMs) to store private keys, and periodic third-party audits.
The CA/Browser Forum is a self-regulatory organization for the certificate issuance industry, whose members include mainstream browser vendors (such as Google, Apple, and Mozilla) and public CAs.
In recent years the CA/Browser Forum has continued to tighten requirements on domain validation, for example limiting the reuse period of validation and requiring stricter random value generation and multi-location validation.
The Baseline Requirements established by the CA/Browser Forum impose mandatory specifications on the methods, frequency, and logging of domain validation, and browsers and operating systems decide whether to trust a given CA based on these specifications.
All Facts (7)
Site operators should confirm whether their own certificate chain includes the affected intermediate CA, and monitor trust store update announcements from the CA/Browser Forum and mainstream browser vendors to replace affected certificates in a timely manner.
50%UnverifiedeMudhra is a major licensed certificate authority (CA) in India, regulated under India's Information Technology Act and the Controller of Certifying Authorities (CCA) system, and is also included in the CA/Browser Forum audit framework.
50%UnverifiedCommercial CA root certificates are preloaded in mainstream trust stores, and their issuance behavior is constrained by CA/Browser Forum baseline requirements and audits in their respective jurisdictions.
50%UnverifiedThe baseline requirements established by the CA/Browser Forum set minimum standards for CAs in key generation, certificate issuance, audit logging and other aspects, for example requiring RSA keys of at least 2048 bits, the use of certified hardware security modules (HSMs) to store private keys, and periodic third-party audits.
50%UnverifiedThe CA/Browser Forum is a self-regulatory organization for the certificate issuance industry, whose members include mainstream browser vendors (such as Google, Apple, and Mozilla) and public CAs.
50%UnverifiedIn recent years the CA/Browser Forum has continued to tighten requirements on domain validation, for example limiting the reuse period of validation and requiring stricter random value generation and multi-location validation.
50%UnverifiedThe Baseline Requirements established by the CA/Browser Forum impose mandatory specifications on the methods, frequency, and logging of domain validation, and browsers and operating systems decide whether to trust a given CA based on these specifications.
50%